VULNERABILITY INTELLIGENCE

CVE-2018-12082

CVSS score7.5 HIGH
EPSS probability0.89%
CISA KEVNot currently listed
Published2018-06-25
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Description

The mintToken function of a smart contract implementation for Fujinto (NTO), a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue.

Primary references